We've been experiencing this issue for about the last month. It seems to affect mostly Apple IOS devices. The user gets the message that their password is incorrect even though it is not. Shutting off the wireless on the device and turning it back on has no effect. However if you power down the device completely and then power it back up it immediately connects to the wireless network. When roaming to the next wireless AP the issue may or may not return. Since we are using WPA-Enterprise with Freeradius for authentication I'm wondering if we are hitting some kind of session management issue where powering down the device forces a new session to be initiated. Has anyone else seen anything similar? -- Timothy A. Holtzen Campus Network Administrator Nebraska Wesleyan University Public PGP key CFB4 3AE8 B726 DEBF 00D9 CCFC 426E 76AF DABC B3D7
Hello there, we have the same problem unfortunately. It says "Thu Oct 4 19:30:08 2018 : Auth: (2139531) Login incorrect (eap_ttls: System call (I/O) error (-1)):*******" Although, user credentials are correct, they cannot connect to wifi through IOS devices. The Freeradius version is as follow. freeradius -v radiusd: FreeRADIUS Version 3.0.17 (git #cb7c6d3500), for host x86_64-pc-linux-gnu FreeRADIUS Version 3.0.17 Copyright (C) 1999-2017 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Thanks in advance İbrahim AKŞİT Best Regards and Wishes Yours Sincerely. On Thu, Oct 4, 2018 at 7:07 PM Tim Holtzen <tah@nebrwesleyan.edu> wrote:
We've been experiencing this issue for about the last month. It seems to affect mostly Apple IOS devices. The user gets the message that their password is incorrect even though it is not. Shutting off the wireless on the device and turning it back on has no effect. However if you power down the device completely and then power it back up it immediately connects to the wireless network. When roaming to the next wireless AP the issue may or may not return. Since we are using WPA-Enterprise with Freeradius for authentication I'm wondering if we are hitting some kind of session management issue where powering down the device forces a new session to be initiated. Has anyone else seen anything similar?
--
Timothy A. Holtzen Campus Network Administrator Nebraska Wesleyan University Public PGP key CFB4 3AE8 B726 DEBF 00D9 CCFC 426E 76AF DABC B3D7
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Just to clarify, in both of your cases FreeRadius is rejecting the access request? At first it sounded as though, in Tim’s case, the system was responding with an accept, but the user was getting an ‘incorrect password’ message from their supplicant. ======================= Mark Williams Network Infrastructure & Services 1770 Forecast Drive, 0506 Blacksburg, VA 24061 markhw@vt.edu (2A83CAC8) > On Oct 4, 2018, at 12:33 PM, Ibrahim AKSIT <ibrahimaksit@gmail.com> wrote: > > Hello there, we have the same problem unfortunately. It says "Thu Oct 4 > 19:30:08 2018 : Auth: (2139531) Login incorrect (eap_ttls: System call > (I/O) error (-1)):*******" > Although, user credentials are correct, they cannot connect to wifi through > IOS devices. > The Freeradius version is as follow. > freeradius -v > radiusd: FreeRADIUS Version 3.0.17 (git #cb7c6d3500), for host > x86_64-pc-linux-gnu > FreeRADIUS Version 3.0.17 > Copyright (C) 1999-2017 The FreeRADIUS server project and contributors > There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A > PARTICULAR PURPOSE > You may redistribute copies of FreeRADIUS under the terms of the > GNU General Public License > For more information about these matters, see the file named COPYRIGHT > > Thanks in advance > > İbrahim AKŞİT > > Best Regards and Wishes > Yours Sincerely. > > > On Thu, Oct 4, 2018 at 7:07 PM Tim Holtzen <tah@nebrwesleyan.edu> wrote: > >> We've been experiencing this issue for about the last month. It seems >> to affect mostly Apple IOS devices. The user gets the message that >> their password is incorrect even though it is not. Shutting off the >> wireless on the device and turning it back on has no effect. However if >> you power down the device completely and then power it back up it >> immediately connects to the wireless network. When roaming to the next >> wireless AP the issue may or may not return. Since we are using >> WPA-Enterprise with Freeradius for authentication I'm wondering if we >> are hitting some kind of session management issue where powering down >> the device forces a new session to be initiated. Has anyone else seen >> anything similar? >> >> -- >> >> Timothy A. Holtzen >> Campus Network Administrator >> Nebraska Wesleyan University >> Public PGP key CFB4 3AE8 B726 DEBF 00D9 CCFC 426E 76AF DABC B3D7 >> >> >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Oct 4, 2018, at 12:04 PM, Tim Holtzen <tah@nebrwesleyan.edu> wrote:
Signed PGP part We've been experiencing this issue for about the last month. It seems to affect mostly Apple IOS devices. The user gets the message that their password is incorrect even though it is not. Shutting off the wireless on the device and turning it back on has no effect. However if you power down the device completely and then power it back up it immediately connects to the wireless network. When roaming to the next wireless AP the issue may or may not return. Since we are using WPA-Enterprise with Freeradius for authentication I'm wondering if we are hitting some kind of session management issue where powering down the device forces a new session to be initiated. Has anyone else seen anything similar?
Do you have session caching enabled on FreeRADIUS? If so, maybe try turning that off. Alan DeKok.
On Oct 5, 2018, at 12:32 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 4, 2018, at 12:04 PM, Tim Holtzen <tah@nebrwesleyan.edu> wrote:
Signed PGP part We've been experiencing this issue for about the last month. It seems to affect mostly Apple IOS devices. The user gets the message that their password is incorrect even though it is not. Shutting off the wireless on the device and turning it back on has no effect. However if you power down the device completely and then power it back up it immediately connects to the wireless network. When roaming to the next wireless AP the issue may or may not return. Since we are using WPA-Enterprise with Freeradius for authentication I'm wondering if we are hitting some kind of session management issue where powering down the device forces a new session to be initiated. Has anyone else seen anything similar?
Do you have session caching enabled on FreeRADIUS? If so, maybe try turning that off.
That'd be my guess too. Debug logs from FreeRADIUS would be useful. -Arran
Hello dear there all, I have first upgrade my openssl version from 1.0.x to latest stable version 1.1.1 (https://www.openssl.org/ says 11-Sep-2018 Final version of OpenSSL 1.1.1 (LTS) is now available: please download and upgrade! After that, I have followed the procedures in the https://wiki.freeradius.org/building/Debian%20and%20Ubuntu#building-packages . Everything seems to work right now. Thanks so much for any comment and support. İbrahim AKŞİT Best Regards and Wishes Yours Sincerely. On Fri, Oct 5, 2018 at 6:38 AM Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On Oct 5, 2018, at 12:32 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 4, 2018, at 12:04 PM, Tim Holtzen <tah@nebrwesleyan.edu> wrote:
Signed PGP part We've been experiencing this issue for about the last month. It seems to affect mostly Apple IOS devices. The user gets the message that their password is incorrect even though it is not. Shutting off the wireless on the device and turning it back on has no effect. However if you power down the device completely and then power it back up it immediately connects to the wireless network. When roaming to the next wireless AP the issue may or may not return. Since we are using WPA-Enterprise with Freeradius for authentication I'm wondering if we are hitting some kind of session management issue where powering down the device forces a new session to be initiated. Has anyone else seen anything similar?
Do you have session caching enabled on FreeRADIUS? If so, maybe try turning that off.
That'd be my guess too. Debug logs from FreeRADIUS would be useful.
-Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Oct 5, 2018, at 2:20 PM, Ibrahim AKSIT <ibrahimaksit@gmail.com> wrote:
Hello dear there all, I have first upgrade my openssl version from 1.0.x to latest stable version 1.1.1 (https://www.openssl.org/ says 11-Sep-2018 Final version of OpenSSL 1.1.1 (LTS) is now available: please download and upgrade!
Hmm, ok good to know. -Arran
participants (5)
-
Alan DeKok -
Arran Cudbard-Bell -
Ibrahim AKSIT -
Mark Williams -
Tim Holtzen